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We propose a projection measurement onto encoded Bell states with a static network of linear op¬ 
tical elements. By increasing the size of the quantum error correction code, both Bell measurement 
efficiency and photon-loss tolerance can be made arbitrarily high at the same time. As a main appli¬ 
cation, we show that all-optical quantum communication over large distances with communication 
rates similar to those of classical communication is possible solely based on local state teleportations 
using optical sources of encoded Bell states, fixed arrays of beam splitters, and photon detectors. 

As another application, generalizing state teleportation to gate teleportation for quantum computa¬ 
tion, we find that in order to achieve universality the intrinsic loss tolerance must be sacrificed and 
a minimal amount of feedforward has to be added. 


Introduction. Since the ground breaking work of 
Duan et al. (DLCZ, [T]) who showed that long-distance 
quantum communication (LDQC) is possible with linear 
optics and atomic-ensemble quantum memories, numer¬ 
ous advanced versions of their quantum repeater protocol 
have been proposed [2]. However, the probabilistic nature 
of entanglement distribution over lossy channels, purifi¬ 
cation, and swapping makes this type of nested quan¬ 
tum repeaters extremely slow, relying on two-way classi¬ 
cal communication and long-lived quantum memories. 

In recent years, various proposals have been made 
to employ quantum error correction (QEC) codes for 
LDQC. Since these codes suppress errors deterministi¬ 
cally, long waiting times and two-way classical commu¬ 
nication (and hence the use of quantum memories) can 
be, in principle, completely avoided. While one class of 
schemes focused on the correction of operational errors 
[3H6], another class did include QEC against transmis¬ 
sion losses making high-rate loss-tolerant or even 

fully fault-tolerant [IMS] LDQC possible. These latter 
schemes are limited only by the speed of the local gate 
operations and thus, they approach rates as obtainable 
in classical communication. Our scheme also allows for 
ultrafast LDQC, but unlike diiniiii] it does so in an all- 
optical fashion without the use of difficult local quantum 
gates (implementable via local nonlinear matter-light in¬ 
teractions 13 in]). 

For this purpose, by employing a certain version of 
loss-tolerant parity codes iBiniiii], we suggest sending 
encoded qubit states directly, which are then subject to a 
Bell measurement (BM) together with locally prepared, 
encoded Bell states after every few kilometers (see Fig.[^. 
These local state teleportations allow for a nondestruc¬ 
tive loss-error syndrome detection and a qubit state re¬ 
covery in one step. The use of QEC by teleportation [15] 
along the channel is conceptually similar to the protocol 
of Ref. m- However, in our scheme, every teleportation 
is performed with optical (encoded) Bell states and linear 
optical elements m- It turns out that the encoding has 
two positive effects: the larger the code is, the more ef¬ 
ficient the ideal BM (despite the linear-optics constraint 
[ 13 ) and the higher the amount of tolerable photon loss 


becomes. In contrast to the all-optical scheme of Ref. [8], 
our logical BMs are conceptually different and work en¬ 
tirely without feedforward. This not only reduces the 
local operation times, but also makes on-chip integration 
along an optical fiber channel more feasible, as optical 
switching in this case is very sensitive to loss [TS] [E] 
[20) . In an extended version of this work m, we give 
further details on the loss resistance of our scheme and 
we show that it is also robust against a variety of ad¬ 
ditional errors such as depolarizing errors and detector 
inefficiencies (loss and dark counts) by performing a de¬ 
tailed secure-key-rate analysis. It is also demonstrated 
there that the scheme still works when photon-number- 
resolving detectors (as considered here) are replaced by 
on-off detectors. Beyond quantum communication, here 
we show that for universal quantum computation, our 
encoded BM ceases to work under full loss tolerance, but 
ideal scalable quantum computation with linear optics is 
still possible with some but less feedforward compared 
to the Knill, Laflamme, and Milburn (KLM, [52]) and 
cluster-based [55H5H] approaches. 



Figure 1. One-way communication scheme: (a) To send a 
quantum state |in)’'"’’"^ over a long distance, repeater stations 
(R) at shorter distances Lo are used to recover the qubit from 
accumulated losses (fading arrows). A classical signal (dou¬ 
ble line) defines a single Pauli correction X at the receiver, 
(b) Each repeater station consists of an encoded Bell state 
and a highly efficient, loss-resistant, logical Bell Measurement 
acting on the incoming signal and one half of the 
Bell state. The other half of the Bell state is sent to the next 
station along with the result of the BM (classical signal). 
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Encoded Bell measurements. The quantum parity 
code [QPC(n, m)] [TTl IT^ encodes a logical qubit into 
nm physical qubits. The code can be understood as 
having three different levels of encoding. On the low¬ 
est level, which we call the physical level, we have stan¬ 
dard dual-rail (DR, two-mode) qubits. These are typ¬ 
ically realized by two orthogonal polarization modes of 
photons {|0) = |iJ),|l) = |R)}, but also other re¬ 
alizations like spatial or temporal modes are possible. 
On the second level of encoding, the block level, m 
physical qubits are collected to represent a block qubit 
= \Vf'^). This repetition part 
of the code is crucial for the loss robustness as we see 
later. The highest encoding level is the logical level. Here 
n block qubits are used to construct the logical qubits 


as |±) 


(n,m) 




The codewords are then naturally obtained by |±)* = 
[|0)* ± |1)*] /-v/S, where the * denotes the encoding level 
[blank for physical, (to) for block and (n, to) for logical]. 

In all three encoding levels the four Bell states are de¬ 
fined as 


|<(>M)* = ;^[|0,fc)* + (-l)'|l,l-fc)*] 


( 1 ) 


with k,l G {0,1}. A Bell measurement has to distinguish 
between these four Bell states. On the physical level, this 
can be partially achieved by combining the two polariza¬ 
tion qubits at a 50 : 50 beam splitter followed by polar¬ 
izing beam splitters and photon detectors [see Fig. 2(c)| . 
Unique click patterns are obtained for |(/)i,o) and |(/>i,i), 
whereas the states are indistinguishable from each 
other. Thus, the overall BM efficiency is 50%, which is 
optimal for dual-rail encoding without ancilla photons or 
feedforward m 

Our approach to a BM on QPC(n, TO)-encoded qubits 
is based on the observation that Bell states of the higher 
encoding levels can be represented in terms of lower- 
encoding-level Bell states. 




reA/rn »=1 




'n,m) 


V2 




(m) 


( 2 ) 

( 3 ) 


sG-Afc Ti i — 1 


as 


Ar 


where the index set is defined 
{ r G {0,1}™ I Ti = / (mod 2) } [26]. These 

relationships between Bell states of different encoding 
levels show that a logical BM can be realized by nm 
simultaneous standard BMs on the physical level. 

Note that the above representations (i),® only hold 
after an appropriate reordering of the modes (indicated 
by =). Quite naturally, the photons of two logical qubits 
in a Bell state are each paired with their equivalent [see 
Fig. 2(a) and |2(b)] . In the following this reordering is 
omitted in the notation. 



Figure 2. Block structure and Bell measurement: (a) The 
block structure for two QPC(2,2)-qubits. The polarization 
qubits on the left (red) belong to the incoming signal and are 
thus subject to channel errors, while those on the right (blue) 
are part of the encoded Bell state provided in the repeater 
station, (b) In a Bell state in QPC encoding the qubits are 
joined blockwise. The dashed ellipses highlight physical-level 
qubit pairs that are combined at the BM. (c) Optical BM 
setup on the physical level adapted to polarization encoding. 


A Bell measurement on the block level is limited by 
the same |-efficiency as a physical BM, because the in¬ 
dex k determining whether a BM on the physical level is 
successful is the same for all physical Bell states within a 
block Bell state. On the other hand, the index I is always 
identified correctly for fc = 1, because in that case the 
values ri are all accessible. On the logical level, the situ¬ 
ation is quite different. The index k is always identified 
correctly, because the values Si from the block level are al¬ 
ways available. Additionally, almost every time the index 
I will now be identified correctly as well, since it suffices 
to identify it in a single block. The only case where this is 
not possible is when all block-level Bell states are 
states. This can only occur in the states with 

a statistical weight of 2^“". Consequently, the chance to 
identify a logical Bell state correctly, i.e. the logical BM 
efficiency, is 1 — 2“". 

In addition to boosting the BM efficiency to near unity, 
the QPCs also protect the Bell measurement against pho¬ 
ton loss. In accordance with our communication scheme 
depicted in Fig. [l] we assume that only the photons of 
one logical qubit participating in the BM are affected by 
loss m- Furthermore, we make the usual assumption 
that the probability to lose a photon {1 — rj) is the same 
for all modes of a logical qubit. The probability of a suc¬ 
cessful logical Bell measurement in the presence of loss 
quantified by rj can be derived from the Bell state repre¬ 
sentations (§ and (§. To identify the value of k in the 
state a correct identification of every value Si 

is required; i.e., in every block the first index must be 
determined. Equation shows that this is possible, as 
long as in every block at least one physical Bell measure¬ 
ment identifies the first index. Since this is guaranteed 
as long as in every block at least one of the to photons 
(belonging to that logical qubit subject to loss) is not 
lost, the probability of correctly identifying k is given by 
[1 — (1 — 77 )”*] . In addition, in order to identify the in- 
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Table I. BM success probability p in % for various QPC(n, m) 
and varying loss rj. 


(n, m) 

77 = 1 

0.99 

0.95 

0.90 

0.75 

0.50 

0.30 

( 1 , 1 ) 

50 

49.5 

47.5 

45 

37.5 

25 

15 

( 2 , 2 ) 

75 

73.99 

69.66 

63.79 

44.82 

17.19 

4.39 

(3,10) 

87.5 

83.56 

65.61 

43.71 

8.21 

0.15 

0.00 

(6,5) 

98.44 

97.92 

94.69 

87.74 

52.86 

7.68 

0.29 

(10,3) 

99.90 

99.87 

99.51 

97.95 

77.77 

13.77 

0.28 

(23,5) 

100.00 

100.00 

100.00 

99.95 

92.44 

15.03 

0.05 


dex I in it must be determined in at least one 

block. The probability to identify I in a block is given 
by because all values are required, which means 
there are no photons lost at all, and because only the 
states allow us to detect I with standard linear 

optical means. In other words, for the relevant logical 
qubit subject to loss, at least one photon must be left in 
every block and at least one block must remain entirely 
uncorrupted. The success probability of the logical BM 
is therefore given by 


P=[1-(1-77)T 





(4) 


where the second term expresses that all terms where 
enough photons were left to identify k but no block al¬ 
lowed to identify I have to be discarded [55] • 

Table |T] shows the attainable BM efhciency for various 
amounts of loss. It indicates that the QPCs indeed pro¬ 
tect the logical qubit from loss as long as p > 0.5, and 
also that, in general, n should be chosen sufficiently larger 
than m: a too large m increases the chance of corrupt¬ 
ing every block. However, a too small m risks corrupting 
all photon pairs in a block. Increasing n on the other 
hand only gives more blocks, thus increasing the chance 
to get at least one without any corruption. Conceptually, 
this is the most important result obtained here: a larger 
code with a larger number of blocks n results in a higher 
linear-optics BM efficiency and a higher loss tolerance at 
the same time. This is different from other BM schemes 
where the loss tolerance is decreasing which has to be 
counteracted by additional quantum error correction |29j 
or fast feedforward operations |5]. 

Long-distance quantum communication. To send a 
QPC(n, m)-encoded qubit state over a total distance L 
we propose placing repeater stations after every channel 
segment with length Lq- At every station an encoded Bell 
state is available on demand (i.e., created and 

consumed locally), and a logical BM is performed on one 
half of the Bell state together with the incoming encoded 
qubit (see Fig. [^. Between two stations every physical 
qubit suffers from loss according to a transmission co¬ 
efficient of 77 = exp(—Lo/Aatt) (with attenuation length 
Latt = 22 km). Whenever the BM succeeds, the qubit 
state is recovered from loss and appears at the other half 
of the Bell state to be sent to the next station HUES]. 



Figure 3. Left: Total success probability Rto vs re¬ 
peater spacing Lq in km for a communication distance of 
L = 1000 km and various encodings [from bottom to top, 
(10,3),(13,4),(16,4),(23,5),(35,6)]. Right: Inverse of the cost 
function Cioookm as a function of the code parameters n, m. 
At every point the optimal repeater spacing Lq is chosen. The 
most cost-efficient code is (23, 5) with a repeater spacing of 
Lo ~ 2.36 km yielding Rto = 77.62%. 


The total success rate m of the communication scheme 

L 

is then given as R = p'^o /tQ, where to is the elementary 
time needed at every repeater station until the incom¬ 
ing signal qubit has been processed and a fresh encoded 
Bell state is ready for teleporting and error correcting the 
next qubit. 

In addition to the repeater success probability Rto, 
which is depicted in Fig. [^ as a function of the repeater 
spacing Lq for various code sizes, we are also interested 
in the cost effectiveness of our communication scheme. 
To this end, we define the cost function Cl = i^'^Lq 
for a given total distance L similar to that in m]. It 
relies on the assumption that the cost for creating the 
ancillary encoded Bell states at every repeater station 
scales linearly in nm (an all-optical method for state gen¬ 
eration based on coherent photon conversion [32j that 
achieves this kind of scaling is presented in the Supple¬ 
mental Material). The inverse I/Cl, which corresponds 
to the repeater success probability per photons used, is 
also shown in Fig. [^ for a total communication distance 
L = 1000 km. Figure [^indicates that total success rates 
extremely close to i? = l/tg can be achieved even for 
fairly large repeater spacings, but in terms of cost effec¬ 
tiveness a rate of about R « 0.75/to yields better results 

m- 

Furthermore, for comparison the cost function Cl can 
also be applied to the case of (near) perfect Bell measure¬ 
ments on the physical level |5il - l55] (e.g., realized with 
additional atomic processing qubits El). While these 
better BMs allow for an efficient use of smaller codes, we 
found that for the optimal choices of n, m, and Lq the 
ratio Cl{pbm = 0-^)/Cl(j>bm = 1) « 3 is almost inde¬ 
pendent of the communication distance L. This imposes 
a limit on how much more expensive perfect BMs should 
be compared to a standard optical BM with efficiency |. 

We should also consider the effect of the elementary 
processing time to- Since our logical Bell states are as¬ 
sumed to be available on demand, to corresponds only to 


















4 


the duration of the linear-optics processing with photon 
detection. Compared to those times required in a matter- 
based scheme with tg ~ 1/is (even assuming future 
enhanced ion-cavity coupling strengths m) or an all- 
optical scheme including feedforward [S] with to ~ 10ns 
(provided all circuits can be integrated [ 37 ]), correspond¬ 
ing to rates R ~ MHz or R ^ 0.1 GHz, respectively, 
our static linear optical scheme allows, in principle, for 
GHz—rates and beyond [ 35 ] . For our scheme to be free 
of feedforward at the intermediate stations, the updated 
(logical) Pauli frame after each teleportation must be 
classically communicated to the end of the channel for 
a final Pauli correction | 39 |. In general, let us discuss 
next universal gates and gate teleportation based on our 
encoded BM. 

Quantum gate teleportation and quantum computa¬ 
tion. The physical Pauli operators of the QPG(n,m) 
may be denoted as Zij, with i = l...n and 

j = l...m labeling the (*, j)th DR qubit, while the log¬ 
ical operators are = Xi^i...Xi^rn (for any i) and 

_ Zi j...Zn.j (for any j) [TT|. Therefore, Pauli 
logic can be performed directly via suitable Pauli gates 
on the DR qubits. This is sufficient for the final Pauli 
frame correction in our LDQC scheme as well as for quan¬ 
tum key distribution applications. More generally, logical 
X and Z rotations are then given by exp[—zXfo’’”)0/2] 
and exp[—respectively, and for any 9 ^ ttZ 
and n > 1, m > 1, an entangling operation is needed that 
acts on the physical qubits. Based on our encoded linear- 
optics BM, we can use logical gate teleportation with 
suitable encoded offline resource states |40| to implement 
arbitrary Clifford computations [including logical two- 
qubit gates such as CNOTfo’"*^] in an intrinsically loss- 
tolerant fashion with no need for feedforward between 
the Clifford gates (and with only a final Pauli frame cor¬ 
rection) . This is a huge simplification compared to KLM 
[22j who require feedforward for every single CNOT and 
additional QEC codes to correct photon-loss errors. How¬ 
ever, for universality, any single-qubit gate of KLM can 
be performed directly on the DR qubits, whereas in our 
general QPC(n, m) scheme, the logical non-Clifford gates 
do not allow for a static BM-based gate teleportation or 
a nonentangling transversal gate application. Therefore, 
for universality, we have to sacrifice the intrinsic loss tol¬ 
erance and employ the most simple versions of the QPC 
such as QPC(n, 1) (Hj. In this case, an arbitrary logical 
X rotation exp[—zXfo’^^0/2] can be done via the same 
rotation exp[—zXj_i0/2] directly on the zth DR qubit 
(for any i) and the remaining set of Clifford operations 
[including a single-qubit 7r/2-rotation exp[—i)7r/4] 
for universality] can be achieved through gate telepor¬ 
tation using the static linear-optics BM scheme. Since 
QPC(n, 1) is enough to realize arbitrarily efficient BMs 
(for sufficiently high n), efficient linear-optics quantum 
computation is possible provided a little, simple Pauli 
feedforward is added every time when a sequence of Clif¬ 


ford gates is followed by a non-Clifford gate. In terms of 
feedforward, this is also a simplification compared to ex¬ 
isting schemes |42j . where every two-qubit gate requires 
Pauli corrections on randomly selected physical qubits 
(for KLM 1^) or even non-Pauli feedforward is needed 
(for one-way quantum computation [331 [ 37 ] ). 

Discussion and conclusions. We proposed an effi¬ 
cient linear-optics BM onto QPC-encoded Bell states and 
showed that, by incorporating protection against trans¬ 
mission losses, it can be used to realize ultrafast high- 
rate LDQC in an all-optical fashion. With no need for 
matter qubits (neither as quantum memories nor as lo¬ 
cal quantum processors) or feedforward operations, our 
communication scheme is most suitable to be integrated 
along an optical fiber channel via chips that contain quan¬ 
tum sources [ 331133 ] . interferometers [ 33 ], and photon de¬ 
tectors [ 37 ]. Encoded-state preparations may be based 
either on nonlinear optical techniques [32j or on linear 
optics [iiniiii], then including feedforward [48] . 
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SUPPLEMENTAL MATERIAL 


A. Bell state representations 


Here we derive our representation of all encoded Bell states in terms of lower-encoding-level Bell states [Eqs. ([^ 
and @ in the main text], 


reAi^m i=l 
1 ” 

= E (8)1^..)^”^’ 




(n,m) 
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(S3) 


where the symbol = indicates the mode reordering mentioned in the main text. On the other hand, independent of 
the encoding, the Bell states can be written in the Pauli X-basis as 

!<)>,,)* = ^[|0,fcr + (-i)'|i,i-71 
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On the logical level, we use this to obtain 




1 


0n 


0n 


72 

[V 

1 


7 i 

[v 

1 


72 "+i 


0n 


0n 


+ (-i)'' (177^™^ - I77^™0 


0n 


At this point it becomes clear that, compared to the derivation on the block level (S31, the indices k and I have simply 
swapped their roles. This yields (S2) immediately. 
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B. Alternative derivation of the Bell measurement success probability 


The derivation of Eq. 


@ in the main text 


p=[i_(i_^n" 


i-a-ryr 



(S4) 


is based on the probability of loosing a photon on the physical level {1 — rf) and then calculating the chance of errors 
on the higher encoding levels with the help of the Bell state representations (§ and (§. We refer to this method of 
tracing the influence of the loss channel from bottom to top through the encoding levels as propagation of errors. It 
is very versatile and is presented in much more detail in an extended treatment of the present results m, where it is 
also generalized to include multiple other error sources. 


Here we present a different approach to deriving the Bell measurement success probability (S4). It lacks the 
generality of the propagation of errors and is not as easily expandable to include other error types than loss, but it 
might be more intuitive. In this approach the efficiency of an encoded Bell measurement is quantified by a set of 
values which are the probabilities of a successful Bell measurement if in total p photons have been lost. We have 
already seen that a successful Bell measurement is possible as long as, with regards to the relevant logical qubit that 
was subject to loss in the communication channel, at least one photon is left in every block and at least one block is 
not corrupted by loss at all. This implies that the maximal number of photons that can be lost is (n — l)(m — 1). 
(This is much larger than the distance of the quantum parity code, which is min(n, m) — 1.) 


In the main text we already calculated the value of po^ p = 0 corresponds to the ideal case of no losses, where we 
get po = 1 — 2“". For p > 1 we get 


Pn = 





Yi jk=n 

fe=i 


(S5) 


With the conventions Nip^m = <5i,o and this also covers the case p = 0. Although looking rather 

complicated at first and not being very convenient for numerical calculations, this formula can be understood quite 
nicely. The term is the number of unique ways to distribute p photon losses on exactly i different blocks, such 

that in every one of these i blocks at least one of the m photons is not lost. The binomial coefficient (") represents the 
number of unique ways to pick i of the n blocks of the code. These are the i corrupted blocks. The normalizing factor 
("™) is the number of unique ways to distribute p photon losses on the nm photons of the code. Ignoring for the 
moment the weight (l — the value p^ is calculated simply by counting those loss configurations that allow 

for a successful Bell measurement. The weight (l — 2“^”“*^) is the probability to identify the index I in at least one 
of the remaining uncorrupted blocks (the corrupted blocks are useless for this, as discussed in the main text). The 
argument that this probability is given by 1 — 2“*^”“®) is the same as that for the derivation of Pq. In fact, the BM on 
the uncorrupted blocks can be seen as a BM on QPC(n — i,m). A table with the values p^ for various code sizes is 
given in section of this supplemental material. 

Next we want to show that the description of the Bell measurement efficiency with the set p^ also yields the same 
value for the total BM success probability p. When all nm photons are subject to the same loss channel p, the chance 
of loosing exactly p photons is given by Therefore, the total BM success probability is 


p = 


n \ M / 


fi—O 


(S6) 


To prove p = p' we use the notation [a;^]p(a;), which is the coefficient of the monomial in the polynomial g{x), for 
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= p. 


C. Effect of faulty ancilla Bell states 

In the main text we have assumed that the photon loss occurs only during the transmission and thus the probability 
of a (partially, i.e. k = 0, I = 7) successful Bell measurement is given by 77 = exp(—Lo/-batt)- However, possible 
imperfections in the ancillary Bell states should not be neglected. Here we assume the imperfections to be missing 
single photons within the QPC Bell state. Furthermore, we assume that the probability (1 — rjm) for a single photon 
of the QPC Bell state to be missing is the same for every photon of the state. The resulting mixed state can also be 
obtained by applying a photon loss error channel of strength rjm to every mode of a perfect QPC Bell state. Since the 
composition of two photon loss channels yields another photon loss channel, the “loss” on the ancillary Bell state can 
be incorporated into the loss error channel of the transmission. In this context it should be noted that the two halves of 
the Bell state are treated differently: one is consumed immediately at the BM, whereas the other one is sent onward to 
the next repeater station. It is therefore useful to shift the point of view from the actual error channels to the success 
probabilities of a physical BM. A physical Bell measurement is (partially) successful if both photons are eventually 
measured. To this end, one photon must have been sent from the previous repeater station, i.e. it must not have 
been missing, and it must not be lost during the transmission. Additionally, the second photon which is part of the 
ancillary Bell state of the current repeater station must be present as well. We therefore get 77 = exp(—Lo/.batt)- 
(At this point it is easy to also introduce lossy photon detectors.) Using this form of 77 in the equations of the main 
text we obtain the total success rate in the case of ancilla states with missing photons. For example, we find for a 
communication distance of L = 1000 km and a chance of 1 — 77 ^ = 3% to be missing a photon that the optimal code 
parameters n = 37, m = 6 and Lq « 2.09 km yield a success probability of Rto = 73.46%. 

Of course, missing single photons are not the only imperfections that can occur. However, with the above idea of 
dividing the errors on the encoded Bell state into two halves and incorporating them into the respective error channels 
leading to and from the repeater station, basically, every type of error that the quantum parity code can handle on 
the “communication” qubits can also be applied to the ancillary Bell states at the repeater stations. For more details, 
see the error rate analysis in | 21 ) . 
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D. Generating QPC(n, m)-states 


In order to generate both the encoded qubits and the ancillary encoded Bell states at the repeater stations we 
propose to employ a scheme based on coherent photon conversion (CPC), as it was presented in Ref. [32]. Here a 
four-wave-mixing interaction, 


H = 'yab^c^d -I- 7 *a^ 6 cfi^, 


(S7) 


as realizable by a standard commercial, polarization-maintaining photonic crystal fiber (PCF), is pumped in one 
mode, e.g. that expressed by the annihilation operator d, with a bright classical beam to obtain effectively a three- 
wave-mixing Hamiltonian 


H = jab''c' + j*a^bc (S 8 ) 

with a strong, tunable, nonlinear coupling 7 oc 'jEii where is the (tunable) electric field amplitude of the pumping 
beam. The Hilbert space {|1,0,0), |0,1,1)} is an eigenspace of this Hamiltonian H. Therefore, a state from this 
Hilbert space undergoes Rabi-like oscillations, when evolving under El. Especially, for an appropriate combination of 
coupling strength and interaction time, namely ^ “ f used as a photon doppler, because 

e-*f^ |100) = |011). 


As a result, the two photons are now in modes b and c. If desired, a transformation into two modes of frequency uja 
is possible with the use of two more CPC elements and by weakly pumping the remaining mode (c or b). For more 
details, see Fig. lb of Ref. [32] . 

Since the vacuum passes the CPC element unchanged, the photon doppler setup can be used to transform qubit 
states into Bell- or GHZ-type states: 

{a |0) -f /3 |1)) O |00) = |0) O (a |00) -b /3 |11)) (S9) 

With the help of polarizing beam splitters it is also possible to build up a scheme that can do the same for polarization 
encoded qubits (see Fig. 2a) and b) in the Supplementary Material of Ref. [32]1: 


a\H)+l3\V} 



a\HH) + /3\VV) 


When concatenating this photon doppling and using half wave plates oriented at 22.5° to the optical axis (which 
realizes a Hadamard gate on polarization-encoded qubits), a scheme for generating arbitrary QPC(n, TO)-states is 
obtained: 



a|Fr)®’"-b/3|F)®' 


Figure 4. Concatenating m — 1 photon dopplers gives a GHZ-type state with m photons. 
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^|0)(".™)+/3|i)K™) 


Figure 5. To generate an arbitrary QPC(n, m) encoded state, an array of nm — 1 photon dopplers and n + 1 half-wave-plates, 
i.e. Hadamard gates, is used. 








Figure 6. The ancillary Bell states at the repeater stations can be produced using two copies of the QPC(n, m) generation 
scheme and one photon doppler to obtain the inital Bell state. This setup requires a total of 2nm — 1 photon doppler modules. 


A state generation scheme as depicted in Figs. |4]-§ gives exactly the (linear) cost scaling of nm upon which the 
cost function C as given in the main text relies, since for creating a QPC(n, m)-encoded Bell state 2nm — 1 copies of 
the photon doppler scheme are required. 

It should be noted, however, that in this state generation scheme we depend on a strong nonlinear interaction, 
realizable with the techniques of coherent photon conversion. These nonlinearities could, in principle, also be used 
to obtain a unit-efficiency Bell measurement on the physical level. Employing these in our communication scheme 
instead of the standard linear optics BMs would allow the use of smaller quantum parity codes. However, the main 
point of our proposal is to present a highly effective and loss resistant Bell measurement on the quantum parity codes 
with the comparatively simple tools of linear optics. 

Next, we take a look at the fault resistance of this state generation scheme. As was explained in Sec. [^of this 
Supplementary Material, all errors that occur on individual physical-level qubits can be incorporated into the error 
channel of the transmission protocol and are taken care of there. However, errors that occur during the state generation 
often lead to non-local errors in the resulting state. We analyze three stages of the state generation. 

The first stage is generating the initial one-photon state |'0) = a\H)+j3\V). Current photon sources cannot produce 
pure states of this form on demand and instead give a mixed state with a vacuum portion p = ps It/') (' 0 | + (l~''7s) |0) (0|. 
The vacuum state passes the CPC-elements unchanged and, as a result, the outcome of the state generation scheme 
can then be written as ps + (1 ~ Vs) For the case that such a multimode-vacuum 

emerges in a repeater station during a time interval to instead of a QPC Bell state, the logical BM will (heraldedly) fail 
at this station and thus the transmission does not succeed. The transmission rate when including the corresponding 
probabilistic element from the imperfect photon sources becomes R = /to. Due to this exponential scaling, 

the value for p^ must be extremely close to one to still obtain acceptable communication rates. For example, for 
a transmission distance of 1 000 km and a repeater spacing of 2 km the vacuum probability 1 — ps must be smaller 
than 0.0014 to allow for repeater rates R > 0.5/to- Unfortunately, current photon sources do not reach this near- 
deterministic regime, but are more commonly at values of about ps ~ 0.5. Yet, by using multiple heralded photon 
sources and a little feedforward (so-called multiplexing at the state preparation stage), it is possible to obtain a 
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sufficient photon generation probability. For example, ten sources with rjs = 0.5 yield at least one photon with 
probability 1 — (1 — 77 ^)^° « 0.9990. Note that, in this case, it is not necessary to have 10 instances of the nonlinear 
photon multiplying scheme presented in the above figures, because the feedforward operation takes place before that. 

The second stage of the state generation scheme includes all steps to transform the single photon state into an 
n-photon state (2n for the Bell state generation). Every photon is then the seed for one of the blocks of the QPC 
state. Should any of these photons be lost, the entire corresponding block is missing in the final state. This will lead 
to a (heralded) failure of the entire BM. Therefore the probability to lose any photons in this stage must be reduced 
as much as possible. Luckily, both the linear and the non-linear parts of the photon doppling can be performed 
near-deterministically (35]. Should, nevertheless, the obtained success probability for the second stage of the state 
generation scheme be too small, multiplexing this stage as well would still be an option. Only very few instances 
would be required at every repeater station, as the base probability is already quite high. The important task of 
heralding the failure to initiate the feed-forward operation can be performed by generating an n -I- 1-photon GHZ 
state instead of the n-photon GHZ state and measuring the additional photon in the X-basis. Due to the simple 
concatenation structure of the GHZ-state generation (see Fig.|^, the last photon is only present if all other n photons 
are as well. The possible (heralded) phase-flip induced by the X-basis measurement can easily be corrected with the 
help of a Z-gate on any of the remaining modes. Using, for example, three multiplying instances (Fig. with a total 
success rate of 0.9 each, together with 10 photon sources of efficiency 7)^ = 0.5 per instance, we obtain a probability 
of « 0.9990 for a successful generation of the desired GHZ state. 

In the third stage of the generation scheme, the individual blocks are built up. Should a photon be lost in this 
stage, the resulting block can still be used for the identification of the Bell-state index k in this block, as long as 
at least one physical BM succeeds. Only its ability to identify the index I is gone. The remaining block is thus 
still useful, even though with the loss of one photon no more extra photons will be added to the state due to the 
linear concatenation scheme in Fig. The number of lost photons can be further decreased by using a more tree-like 
concatenation structure. Then only those modes of the branches starting at the point of loss will be empty instead 
of all later modes. This decreased number of photon loss increases the chance for at least one physical BM to be 
successful. We expect the effect of losses in this stage on the transmission rate to be quite small, as long as the chance 
to lose photons particularly early within the third stage is not too high. 

Our communication scheme is not at all restricted to be based on the nonlinear state generation scheme as described 
above. We may also consider employing exclusively linear optical methods which then includes the generation of the 
encoded states at every repeater station. Such an approach is similar to the all-optical repeater schemes proposed in 
BE- We found that a toolbox for state preparation that contains single-photon sources and detectors, beam splitters, 
and feedforward operations [siin] is also sufficient to create at every repeater station the QPC-encoded states that are 
needed in our scheme [U]. These states can be obtained, again similar to lilS], by first creating so-called tree-cluster 
states (which themselves are obtainable from three-photon GHZ states, probabilistically generated from the initial 
single-photon states, using Bell measurements) and connecting these through Bell measurements. For a QPC as big 
as (24, 5), which is similar to our optimal code in the presence of only transmission losses, an average number of 10® 
photons is needed at every station in order to ensure that every time unit to at least one copy of an encoded state is 
available m- Interestingly, this number is of the same order of magnitude as that derived in where an improved 
state generation scheme was proposed compared to [S] (for our estimation, we assumed perfect single-photon sources 
and advanced 3/4-Bell measurements [36], where indeed performing improved Bell measurements helps a lot for the 
state generations while it is unnecessary for the actual repeater protocol, see main text and [21j - in contrast to |9] 
where it helps for both). This may be owing to the fact that the encoded states from the two schemes and especially 
their basic tree-type resource states resemble each other from a conceptual point of view. 

Note that in either case, a huge amount of feedforward is needed in order to achieve the multiplexing required at 
every stage of the state generation (in this respect, the multiplexing as described above in front of the CPC setup 
is much cheaper in terms of feedforward). Moreover, although the overhead of single photons at every station may 
be constant with distance for reasonably long total distances, it is still a rather demanding overhead from a realistic, 
experimental point of view. Nonetheless, considering this kind of feedforward-based linear-optical state generation also 
for our scheme, we emphasize that only in our scheme there is still no need for any “online” feedforward operations 
which, in contrast, are a crucial ingredient in lilSI. Similarly, only in our scheme, there is no need to distribute 
non-locally the encoded, massively entangled (cluster) states between repeater stations; our encoded Bell states are 
created and consumed locally and only the encoded input qubit must be sent over the transmission channel. Thus, 
there is a significant conceptual difference between our forward-error-corrected, static linear-optics scheme and those 
non-local-entanglement- and feedforward-based linear optics schemes of BM- 

Other linear optical methods, in particular, those based on percolation theory [PRL 115, 020502 (2015)],[PRA 91, 
042301 (2015)] could, in principle, be used to circumvent the need for feedforward to some extent in any of these 
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schemes. Such an approach, of course, would be most compatible with our static linear-optics protocol. However, 
although the method for the “offline” creation of QPC-Bell states with the nonlinear tools of CPC as described 
above leaves the realm of linear optics, it still has the appealing property (in addition to its linear cost in terms of 
single photons) that it is all-optical (no atomic qubits are required for processing) and as well static (no complicated 
feedforward techniques are absolutely necessary). That is why, in the present proposal, we take it as the method of 
our choice. 


E. Bell measurement efficiencies 


In the following table the success probabilities of the BM according to Eq. (S51 are given for various QPC(n, m) 
encodings. 



Table Is. Success probabilities in % of the BM given the total number of photons lost p on one of the logical qubits. 
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(1,1) 

50 



















(1,2) 

50 



















(2,1) 

75 



















(2,2) 

75 

50 


















(2,3) 

75 

50 

20 

















(3,2) 

87.5 

75 

40 

















(3,3) 

87.5 

75 

56.25 

32.14 

10.71 















(3,4) 

87.5 

75 

56.82 

36.82 

20.61 

9.09 

2.60 













(4,3) 

93.75 

87.5 

77.27 

61.36 

40.91 

20.45 

5.84 













(3,5) 

87.5 

75 

57.14 

37.91 

22.80 

12.49 

5.99 

2.33 

0.58 











(5,3) 

96.88 

93.75 

88.39 

79.12 

65.11 

47.20 

28.32 

12.59 

3.15 











(4,4) 

93.75 

87.5 

77.50 

63.93 

48.46 

33.52 

20.68 

10.91 

4.48 

1.12 










(4,5) 

93.75 

87.5 

77.63 

64.47 

49.90 

36.28 

24.90 

16.06 

9.62 

5.21 

2.44 

0.89 

0.20 







(5,4) 

96.88 

93.75 

88.49 

80.59 

70.07 

57.66 

44.58 

32.04 

21.05 

12.29 

6.06 

2.29 

0.51 







(5,5) 

96.88 

93.75 

88.54 

80.84 

70.84 

59.41 

47.75 

36.85 

27.30 

19.35 

13.04 

8.26 

4.83 

2.52 

1.12 

0.38 

0.08 



(7,4) 

99.22 

98.44 

97.05 

94.75 

91.20 

86.10 

79.31 

70.94 

61.32 

50.96 

40.49 

30.51 

21.58 

14.13 

8.38 

4.35 

1.87 

0.60 

0.11 

(3,10) 

87.5 

75 

57.76 

39.90 

25.94 

16.19 

9.77 

5.71 

3.23 

1.76 

0.92 

0.46 

0.22 

0.10 

0.04 

0.01 

0.00 

0.00 

0.00 

(6,5) 

98.44 

96.88 

94.18 

89.95 

83.92 

76.15 

67.05 

57.26 

47.45 

38.15 

29.73 

22.40 

16.26 

11.30 

7.44 

4.58 

2.58 

1.29 

0.54 

(10,3) 

99.90 

99.80 

99.62 

99.05 

97.76 

95.39 

91.59 

86.01 

78.45 

68.91 

57.70 

45.47 

33.22 

22.05 

12.95 

6.47 

2.59 

0.74 

0.11 

(10,4) 

99.90 

99.8 

99.62 

99.31 

98.76 

97.86 

96.46 

94.37 

91.43 

87.51 

82.52 

76.47 

69.45 

61.65 

53.33 

44.81 

36.42 

28.51 

21.37 

(12,4) 

99.98 

99.95 

99.91 

99.82 

99.67 

99.41 

98.96 

98.25 

97.17 

95.59 

93.41 

90.52 

86.82 

82.27 

76.88 

70.70 

63.86 

56.53 

48.92 

(15,5) 

100.0 

99.99 

99.99 

99.98 

99.96 

99.93 

99.87 

99.78 

99.64 

99.43 

99.11 

98.65 

98.02 

97.17 

96.06 

94.65 

92.90 

90.79 

88.30 

(23,5) 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

99.99 

99.99 

99.98 

99.97 

99.96 

99.93 

99.90 

99.85 

99.78 

99.68 

(30,6) 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 

100.0 



